Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ye5EyAZBPUjE4kR6kRYK6lIvADA.cer
File: Ye5EyAZBPUjE4kR6kRYK6lIvADA.cer (raw, json)
Hash identifier: LFpy/u1RQeEBXMyNotP20wbUkZdtI2aPIeEiXLzYhPg=
Subject key identifier: 61:EE:44:C8:06:41:3D:48:C4:E2:44:7A:91:16:0A:EA:52:2F:00:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9F7C66E2D13382C68474EFDA54C21
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.165.144.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:f7:c6:6e:2d:13:38:2c:68:47:4e:fd:a5:4c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61ee44c806413d48c4e2447a91160aea522f0030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:01:fe:55:48:81:8e:03:65:ce:41:07:4e:
b8:bb:5c:f0:4e:e2:fa:e4:44:a4:a4:c6:eb:22:e7:
d4:0c:22:1e:56:8b:09:c7:5b:03:6b:3a:e2:ff:a0:
1f:12:7d:2d:36:12:72:55:f7:05:a9:0b:e2:75:85:
94:32:c1:25:48:1c:f9:bf:92:86:99:c9:45:bb:18:
b4:61:22:26:b1:ee:53:51:19:51:bc:bd:b5:8c:04:
f1:6e:9e:9d:9c:96:d7:d7:4f:0e:7d:5a:a3:11:05:
56:37:ff:b3:5b:dc:44:4d:5e:27:a3:7a:89:4a:88:
bf:98:0c:d3:16:5e:ee:03:19:5b:ad:c7:84:0c:b7:
f5:88:10:39:0f:ef:35:f7:98:07:ed:e0:35:62:e8:
d2:e6:c6:f0:a5:d7:69:75:29:b9:ab:ac:63:57:0a:
9b:b3:95:9d:ee:40:33:7d:02:e2:56:e2:89:e4:13:
32:9f:cb:ac:7f:60:be:71:70:74:86:0c:da:8e:16:
26:c5:0b:e9:16:7d:fe:0c:73:04:d9:2e:7c:e3:f8:
9b:f0:28:a1:87:b5:02:d9:5d:61:b9:4b:b5:37:96:
09:31:5f:41:e3:c6:e6:e3:12:e4:91:1c:05:0a:5d:
52:c6:bc:50:b4:72:3d:aa:ad:1b:d0:0c:46:94:8e:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EE:44:C8:06:41:3D:48:C4:E2:44:7A:91:16:0A:EA:52:2F:00:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/Ye5EyAZBPUjE4kR6kRYK6lIvADA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.144.0/22
Signature Algorithm: sha256WithRSAEncryption
19:95:80:d9:a5:cd:c1:3e:7f:7e:2f:1f:9c:81:51:cd:9c:65:
b2:08:a1:2b:cb:be:c5:a8:28:e5:60:b4:85:17:4d:3d:59:75:
21:df:5c:83:2d:b0:29:1d:32:d2:c6:e3:7d:3b:c3:29:ed:43:
e3:a4:c4:da:9a:06:b1:ea:21:1c:c3:a2:c1:6a:ff:c8:b3:41:
a3:3a:76:c8:dd:42:73:49:d9:a2:8d:e9:54:2b:be:2d:aa:be:
c9:51:1e:16:98:e1:47:57:4a:d4:54:96:a1:29:66:b2:62:b8:
f4:5d:00:a1:eb:93:48:5a:dd:8c:55:84:fc:79:91:47:b4:a1:
a7:5a:2b:69:fc:55:49:a9:a2:d3:5d:55:cd:2a:42:c7:e8:95:
d5:9c:eb:d1:98:ab:10:e9:9b:2f:88:d5:0a:f1:46:d2:6d:3b:
f0:0c:31:c2:39:85:5b:29:d4:28:e9:d9:e5:55:60:eb:ae:e3:
c4:bb:48:ba:8c:ff:3d:1e:54:fe:31:a2:41:ef:5a:1e:87:f9:
a3:a5:b2:5f:3a:19:61:f4:0a:14:3a:2b:26:39:49:68:a5:f2:
8e:9a:e9:b6:5f:99:34:48:e8:2f:23:e8:2b:f6:6f:ef:2d:8c:
fb:4a:df:a7:41:0c:0c:1e:67:3a:03:e0:21:fe:a0:d5:5b:31:
ad:4f:f7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:27 2026 by rpki-client